220-1102 practice questions 21–30

1. Question 21 · 683 in bank

   After returning from vacation, a user is unable to connect to the network at the corporate office. Windows allows the user to log in; however, no internal or external websites are accessible when running a browser. The user's expected network shares are unreachable, and all websites attempted return the message, `Hmm, we can't reach this page.` Which of the following is the MOST likely cause of this issue?

   • AThe user's password expired while on vacation.
   • BThe user clicked on a malicious email.
   • CThe user connected to a captive portal while traveling.
   • DThe user enabled airplane mode.

   Show answer

   Answer: D

   Explanation

   I really hate these questions. We have to assume a few things that are not clear. First it says the user returned from vacation, but does not say they took their laptop with them. Only based on answers in C and D can we assume the user had their laptop with them to which I say, was it really a vacation? Captive portal is possible but so is Airplane mode. User could have been using the laptop and connected to the wifi provided on the plane and went through a captive portal. But the last thing the user may have done was placed the laptop in airplane mode before they landed. Then again, you do have to stow away laptops during landing so I am not sure that Airplane mode may have been necessary. Regardless, I will still go with airplane mode.

   Source: Adapted from community discussion — RyeBread

   Next question

2. Question 22 · 683 in bank

   Select 3

   Which of the following file extensions are commonly used to install applications on a macOS machine? (Choose three.)

   • A.mac
   • B.pkg
   • C.deb
   • D.dmg
   • E.msi
   • F.appx
   • G.app
   • H.apk

   Show answer

   Answer: BDG

   Explanation

   B. .pkg, D. .dmg, and G. .app are the file extensions commonly used to install applications on a macOS machine. A. .mac is not a valid file extension. C. .deb is the file extension used to install applications on a Debian-based Linux operating system, not macOS. E. .msi is the file extension used to install applications on a Windows operating system, not macOS. F. .appx is the file extension used to install applications on a Windows 10 operating system, not macOS. H. .apk is the file extension used to install applications on an Android operating system, not macOS.

   Source: Adapted from community discussion — NotAHackerJustYet

   Next question

3. Question 23 · 683 in bank

   A suite of security applications was installed a few days ago on a user's home computer. The user reports that the computer has been running slowly since the installation. The user notices the hard drive activity light is constantly solid. Which of the following should be checked FIRST?

   • AServices in Control Panel to check for overutilization
   • BPerformance Monitor to check for resource utilization
   • CSystem File Checker to check for modified Windows files
   • DEvent Viewer to identify errors

   Show answer

   Answer: B

   Explanation

   B. The first step that should be taken when troubleshooting the issue of a slow computer after installing a suite of security applications is to check the resource utilization using Performance Monitor. This will allow to see the usage of CPU, memory, and disk space, and identify if any specific process or application is causing high resource usage

   Source: Adapted from community discussion — lilbuu

   Next question

4. Question 24 · 683 in bank

   A manager reports that staff members often forget the passwords to their mobile devices and applications. Which of the following should the systems administrator do to reduce the number of help desk tickets submitted?

   • AEnable multifactor authentication.
   • BIncrease the failed log-in threshold.
   • CRemove complex password requirements.
   • DImplement a single sign-on with biometrics.

   Show answer

   Answer: D

   Explanation

   SSO with biometrics would still be simpler in this case as it removes the need to remember a password in the first place.

   Source: Adapted from community discussion — Thejphall

   Next question

5. Question 25 · 683 in bank

   A field technician applied a Group Policy setting to all the workstations in the network. This setting forced the workstations to use a specific SNTP server. Users are unable to log in now. Which of the following is the MOST likely cause of this issue?

   • AThe SNTP server is offline.
   • BA user changed the time zone on a local machine.
   • CThe Group Policy setting has disrupted domain authentication on the system.
   • DThe workstations and the authentication server have a system clock difference.

   Show answer

   Answer: D

   Explanation

   D. The most likely cause of the issue of users being unable to log in after a Group Policy setting was applied to all the workstations in the network is that the workstations and the authentication server have a system clock difference. This is because, when the Group Policy setting was applied it forced the workstations to use a specific SNTP server, which may not be in sync with the authentication server. This can cause issues with domain authentication as the server may not recognize the login attempts because the timestamps are not in sync. A. The SNTP server being offline may cause issues with time syncing, but it would not cause issues with domain authentication. B. A user changing the time zone on a local machine may cause issues with time syncing, but it would not cause issues with domain authentication. C. The Group Policy setting disrupting domain authentication on the system is a possible cause, but it is less likely than the system clock difference.

   Source: Adapted from community discussion — lilbuu

   Next question

6. Question 26 · 683 in bank

   A technician is setting up a backup method on a workstation that only requires two sets of tapes to restore. Which of the following would BEST accomplish this task?

   • ADifferential backup
   • BOff-site backup
   • CIncremental backup
   • DFull backup

   Show answer

   Answer: A

   Explanation

   The answer is A. Per Professor Messer. Restoring a differential backup is also a moderate amount of time, because we’re not going to need any more than two sets of backup information. That would be your full backup and the last differential backup. When you perform a differential backup, you are not clearing the archive attribute because you’re going to perform this backup again on the next differential backup.

   Source: Adapted from community discussion — Slindsey0304

   Next question

7. Question 27 · 683 in bank

   A technician receives a call from a user who is on vacation. The user provides the necessary credentials and asks the technician to log in to the user's account and read a critical email that the user has been expecting. The technician refuses because this is a violation of the:

   • Aacceptable use policy.
   • Bregulatory compliance requirements.
   • Cnon-disclosure agreement.
   • Dincident response procedures.

   Show answer

   Answer: B

   Explanation

   The correct answer is A. acceptable use policy. Acceptable use policies are designed to protect the security and privacy of user accounts and data, and it is a violation of these policies for a technician to log in to a user’s account without the user’s explicit permission. Regulatory compliance requirements are not related to this issue, as they generally refer to specific laws and regulations that a company must follow, such as those related to data privacy and security. Non-disclosure agreements typically refer to contracts that are signed between two or more parties, and may not apply in this situation. Incident response procedures generally refer to steps that a company takes in response to a security incident, such as a data breach, and do not apply here.

   Source: Adapted from community discussion — NotAHackerJustYet

   Next question

8. Question 28 · 683 in bank

   A technician received a call stating that all files in a user's documents folder appear to be changed, and each of the files now has a .lock file extension. Which of the following actions is the FIRST step the technician should take?

   • ARun a live disk clone.
   • BRun a full antivirus scan.
   • CUse a batch file to rename the files.
   • DDisconnect the machine from the network.

   Show answer

   Answer: D

   Explanation

   A ransomware attack may be the reason for the lock-files. And the second step of malware removal steps is, to bring the computer into Quarantine. (First step was "Identify and research malware symptoms", and to see *.lock-Files is that step)

   Source: Adapted from community discussion — Dido1963

   Next question

9. Question 29 · 683 in bank

   A user is attempting to browse the internet using Internet Explorer. When trying to load a familiar web page, the user is unexpectedly redirected to an unfamiliar website. Which of the following would MOST likely solve the issue?

   • AUpdating the operating system
   • BChanging proxy settings
   • CReinstalling the browser
   • DEnabling port forwarding

   Show answer

   Answer: B

   Explanation

   The correct answer is B. Changing proxy settings. Proxy settings determine where a user's internet traffic is routed and can sometimes be hijacked by malicious websites, redirecting the user to unexpected destinations. By changing the proxy settings, the user can ensure that their internet traffic is routed to the correct destination. Updating the operating system and reinstalling the browser will not necessarily solve the issue, as the problem is not with the browser or operating system, but with the proxy settings. Additionally, enabling port forwarding will not help, as port forwarding is used to open a specific port for incoming traffic and does not affect the web traffic that is associated with the issue.

   Source: Adapted from community discussion — NotAHackerJustYet

   Next question

10. Question 30 · 683 in bank

    An administrator has submitted a change request for an upcoming server deployment. Which of the following must be completed before the change can be approved?

    • ARisk analysis
    • BSandbox testing
    • CEnd user acceptance
    • DLessons learned

    Show answer

    Answer: A

    Explanation

    By going through the Change Management Processes: - Request Forms - Purpose of the change - Scope of the change - Risk analysis - Change board and approvals - End user acceptance Thus, it is A: Risk Analysis as this step must be completed before approvals.

    Source: Adapted from community discussion — Wiz_tech101

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

220-1102 practice, question 21. 683 questions available.